Can anyone just download my images?

No.

Only Verified Journalists can download content. In addition to this they need to be logged in and the BowerKit needs to be active.

The only exception to this is when Access Control is turned on, in which case the BowerKit owner approves each individual user, regardless of user type, and selects which level of access to grant (view only, low-res downloads, or high-res downloads).